Cisco CX and Cisco Prime Security Manager Compatibility

Published: November 30, 2012

Last Updated: January 20, 2016

This document lists the compatibility for software and hardware for Cisco CX platforms and Cisco Prime Security Manager (PRSM).

Caution For ASA Version 9.3(2), 9.2(3), 9.1(5.21) and later, only ASA CX Version 9.3(2.1) and later is supported. When upgrading your ASA, first upgrade the ASA CX software; otherwise the ASA CX module will become unresponsive.

Cisco Prime Security Manager ASA CX Device Support Matrix

Cisco Prime Security Manager (PRSM) Multiple Device mode can manage ASA CX devices and the ASAs that contain them. You must use the same PRSM version number as that running on the ASA CX device.

The following table shows the supported ASA versions for the given ASA CX/PRSM releases. The table assumes that you are running the most recently released build for a given ASA CX/PRSM version.

Table 1 Cisco Prime Security Manager ASA CX Device Support

ASA CX and PRSM Version

Supported ASA Versions

9.1(1)

ASA 9.1(1-5**)

9.1(2)

ASA 9.1(2-5**)

9.1(3)

ASA 9.1(3-5**) 9.2(1-2) 9.3(1)

9.2(1)

ASA 9.1(5**) 9.2(1-2) 9.3(1)

9.3(1)

ASA 9.1(5**) 9.2(1-2) 9.3(1)

9.3(2-4)

ASA 9.1(5+) 9.2(1+) 9.3(1)+

Note **Except for CX 9.3(2), ASA Software 9.1(5) is supported up to 9.1(5.21). With 9.1(5.21) and higher, CX 9.3(2) and higher are the only supported CX releases.

Cisco ASA CX Hardware Compatibility

Cisco ASA CX Software can run on select hardware platforms. Some platforms are dedicated to the ASA CX, others allow you to install ASA CX as a software module.

The following table shows the hardware platforms that support each ASA CX hardware or software module, and the required ASA CX and ASA Software versions. The table assumes that you are running the most recently released build for a given ASA CX version.

Note **Except for CX 9.3(2), ASA Software 9.1(5) is supported up to 9.1(5.21). With 9.1(5.21) and higher, CX 9.3(2) or higher are the only supported CX releases.

Cisco Prime Security Manager ASA without CX Device Support

In addition to the ASA CX support matrix shown in Cisco Prime Security Manager ASA CX Device Support Matrix, PRSM 9.2 and higher can manage Cisco ASA-5500 Series Adaptive Security Appliance (ASA) devices that do not include a CX module. The following table shows the supported models and ASA Software versions for non-CX ASA devices.

Table 3 Cisco Prime Security Manager ASA without CX Device Support

ASA Model

Supported ASA Software Versions (No CX Installed)

By PRSM Version

9.2(1)

9.3(1-4.1)

9(4.2+)

5510

5512-X

5515-X

5520

5525-X

5540

5545-X

5550

5555-X

5585-X, all models

9.0(1), 9.0(2)

9.1(x)

9.0(1), 9.0(2)

9.1(x)

9.2(x)

9.3(x)

9.x (all versions).

System Software Upgrade Paths

The following table shows the supported upgrade paths for System Software packages. Supported paths have been tested; any other combination is untested and is not supported. Thus, you might need to apply multiple upgrade packages to get to the current release.

Because the releases listed consist of multiple maintenance releases, which include an extra point and build number, keep the following in mind when evaluating an upgrade from one specific build to another:

You might be prevented from upgrading between specific builds of older releases to a specific build of the higher release. As a general rule, if you are running a build that was released chronologically after a given build of the higher release, you cannot upgrade to that build; wait for a new build. For example, you cannot upgrade from 9.2(1.4)-5 to 9.3(1.1)-112, although upgrade from 9.2(1) to 9.3(1) is generally supported.

Tested upgrade paths are for the most recent build number for a given version, and sometimes the second most recent build. For example, upgrade from 9.1(1) to 9.1(3) is tested with build 9.1(1) Build 21; 9.1(2) to 9.1(3) is tested with 9.1(2) Builds 29 and 42. To ensure the best results, you should upgrade to the most recent build (that was released chronologically prior to the higher release’s build) for the release you are running before upgrading to a new version.

Table 4 Cisco CX and Cisco Prime Security Manager Upgrade Paths

Old Version

New Version

9.0(1)

9.0(2)

9.1(1)

9.1(2)

9.1(3)

9.2(1)

9.3(1)

9.3(2)

9.3(3)

9.3(4)

9.0(1)

Yes

Yes

—

—

—

—

—

—

—

—

9.0(2)

—

Yes

Yes

—

—

—

—

—

—

—

9.1(1)

—

—

Yes

Yes

Yes

Yes

Yes

—

—

—

9.1(2)

—

—

—

Yes

Yes

Yes

Yes

—

—

—

9.1(3)

—

—

—

—

Yes

Yes

Yes

Yes

Yes

Yes

9.2(1)

—

—

—

—

—

Yes

Yes

Yes

Yes

Yes

9.3(1)

—

—

—

—

—

—

Yes

Yes

Yes

Yes

9.3(2)

—

—

—

—

—

—

—

Yes

Yes

Yes

9.3(3)

—

—

—

—

—

—

—

—

Yes

Yes

9.3(4)

—

—

—

—

—

—

—

—

—

Yes

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.